In theory, each patch is to be applied to the current SR, and a customer/user has to sign a document that he will upgrade to the next service release as soon as it is made available. Moreover, patches can only be applied to a very specific release of QlikView software (they "patch" or replace binaries that will be different in the next SR), not to a later or an earlier one. That's the theory.